Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da9d1ab2-61e0-3052-b650-d4d16729910b.roa
File: da9d1ab2-61e0-3052-b650-d4d16729910b.roa (raw, json)
Hash identifier: 7m5VsbDhwYTqf98iwj2D+hC5hm0Ihq7thVE7JgLKSZE=
Subject key identifier: 5B:6F:11:D9:A7:95:92:DE:2A:2D:10:30:38:AA:A5:48:83:C5:8B:BE
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F432858480A73E59F51295673CE252900
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da9d1ab2-61e0-3052-b650-d4d16729910b.roa
Signing time: Fri 29 Nov 2024 13:58:29 +0000
ROA not before: Fri 29 Nov 2024 13:58:29 +0000
ROA not after: Thu 27 Feb 2025 13:58:29 +0000
asID: 396567
IP address blocks: 199.7.71.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:48:0a:73:e5:9f:51:29:56:73:ce:25:29:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Nov 29 13:58:29 2024 GMT
Not After : Feb 27 13:58:29 2025 GMT
Subject: CN=98ceab96-04e5-444e-be4b-af196d6e1559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:29:d1:88:36:38:01:6d:87:4a:36:a3:fc:cf:
69:9c:e9:71:ce:8a:5d:d3:30:66:e1:70:d0:16:5f:
e5:d1:53:3c:d9:70:9f:c9:f9:d6:b9:b3:14:93:f8:
29:87:2f:82:4a:45:bc:7a:79:7d:78:e1:d2:25:46:
86:f7:e6:6b:77:b1:c7:17:df:35:06:78:90:51:48:
0a:6d:e2:71:f1:49:9c:07:9a:11:37:cd:26:e8:4a:
a7:06:fd:19:3a:a3:58:36:84:c0:86:e2:e5:a5:77:
a8:23:80:d3:56:01:12:77:3e:82:42:29:83:1d:69:
04:8b:4f:b4:da:17:34:89:32:d9:00:74:8c:dc:7c:
b8:4f:13:04:1a:41:ae:a5:f5:58:22:f2:d7:a9:f1:
89:1d:01:66:37:58:8d:1b:9f:c3:49:24:46:5c:f3:
6e:9f:c8:f1:77:45:fe:ec:35:94:10:b3:85:83:9c:
e5:b1:35:e1:d4:c7:ed:61:c9:42:12:fe:97:11:c7:
58:20:ed:6e:68:0a:cb:0f:f8:f4:83:5b:7a:0c:97:
49:32:a7:d4:f5:cf:61:d6:0f:78:e1:50:04:9e:43:
13:81:a8:56:eb:20:ab:3c:0b:fb:6a:bb:09:e2:95:
96:ad:db:b4:fd:10:80:71:f9:6a:d1:1f:3a:05:10:
ea:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:6F:11:D9:A7:95:92:DE:2A:2D:10:30:38:AA:A5:48:83:C5:8B:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/da9d1ab2-61e0-3052-b650-d4d16729910b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.71.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:7b:51:4d:0a:55:9d:b1:23:fc:24:76:e7:95:89:2c:0b:96:
e3:17:47:29:5f:6e:ed:45:f8:2f:a5:53:ff:a3:7f:09:de:5b:
2b:ff:ed:10:88:21:7f:0e:a7:48:a9:01:dd:e6:4c:50:b5:09:
df:a2:7a:d6:48:07:74:af:bc:40:25:a3:b1:1c:ca:3e:fd:e9:
79:7c:4e:be:b8:0e:38:fe:13:96:bd:4d:f4:83:5e:76:c4:f2:
6d:35:6d:d3:46:c3:34:2a:21:29:2b:cc:08:44:b7:29:b9:87:
e8:db:3c:6d:4d:46:ce:a3:54:8d:65:5e:9b:cd:00:d7:5c:e1:
1f:ef:d4:23:b2:68:6b:8b:79:19:bf:62:74:d5:7c:35:4f:ba:
1b:62:eb:87:e7:bb:71:08:fd:9c:90:58:c7:c0:cf:6c:39:e6:
eb:5e:08:67:14:32:96:a2:00:64:96:6a:b9:9a:57:92:6d:3c:
6d:f0:ea:d9:4e:19:3f:6a:18:41:46:5d:54:fc:13:e9:75:96:
3b:a8:8d:09:cc:f7:84:5a:10:55:93:53:91:27:0a:f0:38:38:
98:9a:0f:e5:56:c5:aa:e0:3a:37:18:70:5b:59:c7:0b:e1:48:
38:53:bf:89:e6:9c:f9:e7:65:f5:df:6e:5e:48:37:4a:17:f0:
5f:a1:41:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:54 2025 by rpki-client